Bay Networks 6300 Supplement Manual page 322

Chapter 15 Using RA 6300 Security
Remote Annex 6300 Supplement to the Remote Annex Administrator's Guide for UNIX
A-294
When the RA 6300 requests PAP and the peer ACKs the request, the
RA 6300 handles the incoming PAP user name/password combination as
follows:
• If the enable_security and slip_ppp_security parameters are
set to Y, the RA 6300 first tries to authenticate the user name/
password combination using ACP. ACP checks the regime file to
determine the regime and password file to use (see
the acp_regime File
unavailable, the RA 6300 falls back to local security (i.e., it
compares the remote end's user name/password against the
global port parameters user_name and port_password).
• If the enable_security parameter is set to Y and the
slip_ppp_security parameter is set to N, the RA 6300 uses local
security (i.e., it compares the remote end's user name/password
against the global port parameters user_name and
port_password).
• If the user name/password combination is valid, the RA 6300
sends a PAP Authenticate-ACK message. If the combination is
not valid, the RA 6300 sends a PAP Authenticate-NAK message.
When the RA 6300 agrees to PAP, it sends the PAP user name/password
combination as follows:
• It uses the global port parameter ppp_username_remote as the
user name.
• It uses the global port parameter ppp_password_remote as the
password.
• If the user name/password combination is valid, the peer sends a
PAP Authenticate-ACK message. If the combination is not valid,
the peer sends a PAP Authenticate-NAK message.
on page 15-245). If the ACP server is
Book A
Configuring